Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: ERPlwAWtVwIICiLXigT8UHiDPAtXktEaXIMqprD+T3A=
Subject key identifier: CE:63:BD:98:1A:35:F5:5F:A8:2A:DA:CC:25:82:65:87:69:8D:69:09
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 01960F7B928D801ED8D4055782E02159B56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 0FF9
Signing time: Mon 07 Apr 2025 09:01:18 +0000
Manifest this update: Mon 07 Apr 2025 09:01:18 +0000
Manifest next update: Tue 08 Apr 2025 09:01:18 +0000
Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: qqUdV5FTUZUU4jM56mkrXuIHtn3mS+O+yOeN+l5+7H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:92:8d:80:1e:d8:d4:05:57:82:e0:21:59:b5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Apr 7 09:01:18 2025 GMT
Not After : Apr 8 09:01:18 2025 GMT
Subject: CN=ce63bd981a35f55fa82adacc25826587698d6909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:25:f3:f9:25:38:cd:76:54:57:dc:04:3f:
04:5d:b9:41:d8:88:4d:68:64:3d:fb:fa:b3:2a:84:
1e:e3:61:a0:2f:40:95:88:73:0c:ec:d5:e8:52:5f:
ba:f0:82:ef:1e:a3:3e:81:d0:fa:ff:8e:56:33:e6:
0e:d9:f1:93:4e:41:c7:fd:87:3f:6e:a9:21:de:b4:
1c:61:b6:03:5f:dc:14:e4:08:f3:68:e6:46:cb:da:
13:9e:ba:56:25:9b:70:a3:31:de:67:92:7b:ac:ef:
ac:ef:c7:66:f0:b5:34:3c:32:d1:57:a4:73:98:97:
c9:24:65:4b:c3:bd:58:9e:40:be:94:61:2e:6f:0b:
a3:e5:20:9e:95:83:05:9a:46:c6:ce:98:9c:3d:0e:
1d:6b:63:a3:cd:58:86:08:1d:89:2f:22:04:03:0a:
09:99:70:90:38:5f:0c:07:6a:5b:d3:24:39:58:9c:
40:16:31:02:ac:22:f8:a7:de:13:da:3c:d6:86:b0:
e3:4a:0a:ef:8c:16:e9:8e:73:62:c5:50:b6:3a:7e:
0b:98:1b:8a:e5:bd:ef:08:92:cc:15:5a:7a:41:df:
f1:6e:25:6d:02:88:a0:3a:9d:9d:c8:1c:fe:44:64:
4e:eb:43:cb:6f:6f:ae:e2:d1:8b:17:7c:7b:31:84:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:63:BD:98:1A:35:F5:5F:A8:2A:DA:CC:25:82:65:87:69:8D:69:09
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:93:83:ca:ec:1c:c9:20:03:42:2d:4a:36:ba:45:1c:47:d1:
24:ec:43:d2:c9:d8:46:94:e8:1e:91:97:f4:f4:dc:7f:1c:b9:
d1:9f:92:d0:8c:a9:e6:31:b5:99:83:9d:0f:dc:7f:aa:29:96:
00:7a:92:40:f4:fd:17:fe:8d:89:65:63:6f:fa:89:59:f2:e7:
a3:1e:71:99:fe:f6:29:d0:82:96:9f:19:1d:86:aa:d4:33:eb:
bc:11:5b:53:51:d7:ee:0e:5d:14:c1:6f:34:22:0b:3d:06:50:
7e:d8:77:c4:eb:a2:b0:9c:12:fc:9d:23:2c:08:a3:a7:c9:f9:
6d:fc:37:ba:f3:c3:54:a9:97:ea:8c:f4:e0:9f:07:86:e4:dd:
0b:ca:42:8b:72:1b:f5:60:05:5e:32:dd:da:18:53:7a:ad:d1:
2b:5b:24:06:17:7d:ed:28:c4:08:6b:02:0f:1d:c3:a5:bc:6e:
22:70:e6:39:52:95:b9:56:a1:90:ce:11:cf:51:04:5e:de:c4:
9b:e4:7d:12:de:2e:85:20:db:33:4b:01:bc:f2:38:fe:42:11:
af:38:35:02:22:f8:8a:ce:7b:95:56:08:f0:38:aa:0c:4e:cd:
9f:15:13:9c:3c:7a:4d:95:35:f5:6a:5d:a6:6d:47:cf:b1:e2:
4e:84:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:26:33 2025 by rpki-client